Organizations and Users

Every incident, preplan, membership, and reusable template belongs to an organization. Users may belong to multiple organizations and can have different roles in each one.

Organization administrators should:

1. Add a user’s email address before the user’s first identity-provider login.
2. Assign only the roles required for the person’s duties.
3. Confirm the user is working in the correct organization.
4. Remove or deactivate access promptly when it is no longer needed.

Platform administration and organization administration are distinct. Platform-owner functions can manage organizations across the deployment and should be limited to designated system owners.